Valgerist lõputöö

edit.php

@@ -0,0 +1,55 @@
+<?php
+
+	require("../../config.php");
+	require("functions.php");
+
+
+
+
+
+
+	if(isset($_POST["update"])){
+
+		updatecontact($_POST["nimi"], $_POST["staatus"], $_POST["kuup"], $_POST["uusnimi"], $_POST["reiting"] );
+
+
+
+		header("Location:movies.php");
+        exit();	
+
+	}
+
+	if(isset($_POST["delete"])){
+
+		deletecontact($_POST["nimi"]);
+
+		header("Location:movies.php");
+        exit();	
+
+	}
+
+
+	$c = getSingleContactData($_GET["nimi"]);
+
+
+?>
+
+<br><br>
+<a href="movies.php"> tagasi </a>
+
+<h2>Muuda kirjet</h2>
+  <form action="<?php echo htmlspecialchars($_SERVER["PHP_SELF"]);?>" method="post" >
+	<label for="reiting" >Reiting</label><br>
+	<input id="reiting" type="integer" name="reiting"  ><br><br>
+  	<label for="nimi" >Filmi nimi</label><br>
+	<input type="hidden" name="nimi" value="<?=$_GET["nimi"];?>" >
+	<input id="nimi" name="uusnimi" type="text" value="<?php echo $c->nimi;?>" ><br><br>
+  	<label for="staatus" >Staatus</label><br>
+	<input id="staatus" name="staatus" type="text" value="<?=$c->staatus;?>"><br><br>
+	<label for="kuup" >Kuupaev</label><br>
+	<input id="kuup" name="kuup" type="text" value="<?=$c->kuup;?>"><br><br>
+
+	<input type="submit" name="update" value="Salvesta">
+	<br><br><br>
+	<input type="submit" name="delete" value="Kustuta Film">
+  </form>

functions.php

@@ -0,0 +1,280 @@
+<?php
+
+	session_start();
+
+
+	function signUp ($email, $password) {
+
+		$database = "if16_georg";
+		$mysqli = new mysqli($GLOBALS["serverHost"], $GLOBALS["serverUsername"], $GLOBALS["serverPassword"], $database);
+
+		$stmt = $mysqli->prepare("INSERT INTO eksam(email, password) VALUES(?, ?)");
+
+		echo $mysqli->error;
+
+		$stmt->bind_param("ss", $email, $password);
+
+		if($stmt->execute()) {
+
+			echo "salvestamine onnestus";
+
+		} else {
+
+			echo "ERROR".$stmt->error;
+		}
+
+		$stmt->close();
+		$mysqli->close();
+
+	}
+
+	function login($email, $password) {
+
+		$error="";
+
+		$database = "if16_georg";
+		$mysqli = new mysqli($GLOBALS["serverHost"], $GLOBALS["serverUsername"], $GLOBALS["serverPassword"], $database);
+
+		$stmt = $mysqli->prepare("SELECT id, email, password FROM eksam WHERE email=?");
+
+		echo $mysqli->error;
+
+		$stmt->bind_param("s", $email);
+
+		$stmt->bind_result($id, $emailFromDb,$passwordFromDb);
+
+		$stmt->execute();
+
+		if($stmt->fetch()){
+
+			$hash=hash("sha512", $password);
+			if($hash==$passwordFromDb){
+
+				echo"Kasutaja logis sisse ".$id;
+
+				$_SESSION["userId"]=$id;
+				$_SESSION["userEmail"]=$emailFromDb;
+
+				header("Location: movies.php");
+
+			}else {
+				$error="vale parool";
+			}
+
+		}else{
+
+			$error="ei ole sellist emaili";
+
+		}
+
+		return $error;
+
+	}
+
+	function savecontact ($nimi, $staatus, $kuup, $user) {
+
+		$database = "if16_georg";
+		$mysqli = new mysqli($GLOBALS["serverHost"], $GLOBALS["serverUsername"], $GLOBALS["serverPassword"], $database);
+
+		$stmt = $mysqli->prepare("INSERT INTO filmid(nimi, staatus, kuup, kasutaja) VALUES(?, ?, ?, ?)");
+
+		echo $mysqli->error;
+
+		$stmt->bind_param("ssss", $nimi, $staatus, $kuup, $user);
+
+		if($stmt->execute()) {
+
+			echo "salvestamine onnestus";
+
+		} else {
+
+			echo "ERROR".$stmt->error;
+		}
+
+		$stmt->close();
+		$mysqli->close();
+
+	}
+
+	function getallcontacts($user, $q, $sort, $direction) {
+
+		$allowedSortOptions=["nimi","staatus","kuup","reiting"];
+		if(!in_array($sort, $allowedSortOptions)){
+			$sort = "nimi";
+		}
+
+
+		$orderBy="ASC";
+		if($direction == "descending"){
+			$orderBy="DESC";
+		}
+
+
+
+		$database = "if16_georg";
+		$mysqli = new mysqli($GLOBALS["serverHost"], $GLOBALS["serverUsername"], $GLOBALS["serverPassword"], $database);
+
+		if($q==""){
+
+			$stmt=$mysqli->prepare("
+			SELECT nimi, staatus, kuup, reiting
+			FROM filmid
+			WHERE kasutaja = ?
+			ORDER BY $sort $orderBy
+		");
+
+		$stmt->bind_param("s", $user);
+
+		} else {
+
+			$searchword="%".$q."%";
+			$stmt=$mysqli->prepare("
+			SELECT nimi, staatus, kuup, reiting
+			FROM filmid
+			WHERE kasutaja = ? AND (nimi LIKE ? OR staatus LIKE ? OR kuup LIKE ? OR reiting LIKE ?)
+			ORDER BY $sort $orderBy
+		");
+
+		$stmt->bind_param("sssss", $user, $searchword, $searchword, $searchword, $searchword);
+
+		}
+
+
+		$stmt->bind_result($nimi, $staatus, $kuup, $reiting);
+		$stmt->execute();
+
+		$result=array();
+
+		while($stmt->fetch()) {
+
+			$contact= new stdclass();
+
+			$contact->nimi=$nimi;
+			$contact->staatus=$staatus;
+			$contact->kuup=$kuup;
+			$contact->reiting=$reiting;
+
+
+			array_push($result, $contact);
+		}
+
+		$stmt->close();
+		$mysqli->close();
+
+		return $result;
+	}
+
+	function getSingleContactData($nimi){
+
+        $database = "if16_georg";
+
+
+		$mysqli = new mysqli($GLOBALS["serverHost"], $GLOBALS["serverUsername"], $GLOBALS["serverPassword"], $database);
+
+		$stmt = $mysqli->prepare("SELECT staatus, kuup, reiting FROM filmid WHERE nimi=?");
+		$stmt->bind_param("s", $nimi);
+		$stmt->bind_result($staatus, $kuup, $reiting);
+		$stmt->execute();
+
+
+		$contact = new Stdclass();
+
+
+		if($stmt->fetch()){
+
+			$contact->nimi = $nimi;
+			$contact->staatus = $staatus;
+			$contact->kuup = $kuup;
+			$contact->reiting = $reiting;
+
+
+		}else{
+
+			header("Location: functions.php");
+			exit();
+		}
+
+		$stmt->close();
+		$mysqli->close();
+
+		return $contact;
+
+	}
+	function updatecontact($nimi, $staatus, $kuup, $uusnimi, $reiting){
+
+        $database = "if16_georg";
+
+		$mysqli = new mysqli($GLOBALS["serverHost"], $GLOBALS["serverUsername"], $GLOBALS["serverPassword"], $database);
+
+		$stmt = $mysqli->prepare("UPDATE filmid SET nimi=?, staatus=?, kuup=?, reiting=? WHERE nimi=?");
+		$stmt->bind_param("sssss",$uusnimi, $staatus, $kuup, $reiting, $nimi);
+
+		// kas �nnestus salvestada
+		if($stmt->execute()){
+
+			echo "salvestus �nnestus!";
+		}
+
+		$stmt->close();
+		$mysqli->close();
+
+	}
+
+	function deletecontact($nimi){
+
+        $database = "if16_georg";
+
+		$mysqli = new mysqli($GLOBALS["serverHost"], $GLOBALS["serverUsername"], $GLOBALS["serverPassword"], $database);
+
+		$stmt = $mysqli->prepare("DELETE FROM filmid WHERE nimi=?");
+		$stmt->bind_param("s", $nimi);
+
+
+		if($stmt->execute()){
+
+		}
+
+		$stmt->close();
+		$mysqli->close();
+
+	}
+
+
+
+	function getStaatus($user) {
+
+		$database = "if16_georg";
+		$mysqli = new mysqli($GLOBALS["serverHost"], $GLOBALS["serverUsername"], $GLOBALS["serverPassword"], $database);
+
+
+		$stmt=$mysqli->prepare(" SELECT COUNT(staatus) FROM filmid WHERE kasutaja = ? AND (staatus LIKE 'vaadatud'); ");
+
+		$stmt->bind_param("s", $user);
+
+
+		$stmt->bind_result($vaadatud);
+		$stmt->execute();
+
+		if($stmt->execute()){
+			echo "korras";
+			echo $vaadatud;
+		}
+
+
+		$stmt->close();
+		$mysqli->close();
+
+
+
+	}
+
+
+
+
+
+
+
+
+
+
+?>